Privacy and cookies

1. Personal data

We provide software for the logistics sector. It is sometimes necessary for us to process your personal data to be able to properly carry out these activities. Personal data is data that is directly or indirectly traceable to you and that is left by using our services.

Personal data is inter alia provided by entering into an agreement for services, filling in the contact form on our website, or by visiting our office building. Only personal data that is directly stated by you, or of which it is clear from the statement that this is provided to us for processing, will be processed and retained by us.

2. Identity

The controller responsible for the processing of your personal data is:

Yellow Star Solutions BV., with its registered office in Barendrecht at the address Pesetastraat 40 and listed in the register of the Chamber of Commerce under number 24456947.

3. Types of personal data and purpose of use

The following personal data is collected and retained by us:

CLIENTS

The type of personal data

• Contact details of the client or the client’s legal representatives (such as first name, surname, company name, title, address, place of residence, telephone number);
• Financial data;

Purposes

• The execution of your assignment and the management of the relationships ensuing therefrom;
• Purchase of services and products from our supplier;
• The calculation or recording of invoices, making payments, and the collecting of claims;
• Client relationship management, marketing, client administration, and service purposes; 

Legal basis

• The performance of the agreement with the client;
• The fulfilment of statutory obligations (to keep records);
• Meeting (contractual) requirements related to (professional liability) insurances;
• Looking after the legitimate interest to provide services as efficiently as possible to clients;

Retention period

• For a maximum of 5 years after the termination of the assignment.

Consequences of not providing data

• We might not be able to (fully) execute the assignment on behalf of the client without the personal data.

USERS OF OUR WEBSITE

The type of personal data

• The contact details of the user (such as first name, surname, company name, title, email address, gender, telephone number, IP address, and clicking and surfing behaviour on www.yellowstar.com);
• The message left behind by the user, including any personal data included by the user in that message;
• Cookies (see further under point 6 for this) of this privacy statement;

Purposes

• Service purposes for the complete dealing with the message from the user;
• Client relationship management, marketing, client administration;

Legal basis

• Looking after the legitimate interest to provide services as efficiently as possible to the users of the website;

Retention period

• Not exceeding the duration that is necessary to be able to fully deal with and complete the contents of your request, but no longer than 2 years.

Consequences of not providing data

• We might not be able to (fully) deal with the message without the personal data.

4. Retention periods

We retain your personal data for a maximum of the duration as referred to above under point 3) of this privacy statement, unless your data must be saved for longer on the basis of statutory (retention) obligations, or if saving this for longer is really necessary for carrying out our activities.

5. Use of personal data by third parties

Personal data will not be provided to third parties without your separate, express consent, unless we are obliged to do so pursuant to the law. If we give third parties access to your data, we only do this if we are certain that these third parties will only use the data in a manner and for a purpose that is related to the purpose for which we have obtained the data, with due observance of the (confidentiality and security) measures required by law and only in accordance with this privacy statement. For safeguarding this, we have made contractual arrangements (processing agreements) with all parties that we provide your personal data to.

Retention periods

We use various systems to be able to execute our marketing optimally. Below is indicated for how long the data will be retained .

• Google Analytics: 26 months after the last activity on our website. Data can be saved outside the EU, but Google complies with the Privacy Shield in this regard.
• CRM: We retain personal data for the purpose of our marketing. If it appears that a person has left employment and no longer holds a relevant position within the company concerned, this will be adjusted in the system and this data will be removed from our system after one year. This data then still remains available for one month in back-ups, after which it will be completely removed. Data is saved in the Netherlands (within the EU).
• Sharpspring: We save personal data for the purpose of our marketing. The data in Sharpspring is synchronised with our CRM system. If it appears that a person is no longer employed by the company concerned, this person will be deregistered from further communication. This data will be removed from the system after one year. Sharpspring saves personal data in back-ups for seven days. Data can be saved outside the EU, but Sharpspring complies with the Privacy Shield in this regard.

For further information regarding the processing of personal data by these various systems, we would like to refer to the privacy statement of the organisation concerned.

6. Use of cookies

We use cookies when offering our electronic services. A cookie is a simple small file that is sent together with pages of a website and is stored by your browser to the hard drive of your computer or your smartphone or tablet. Due to this we can inter alia combine various requests from pages of the website and analyse the behaviour of users. This enables us to improve our services. Please continue reading for further information regarding the use of cookies and your rights.

7. Right of access and correction

• You can object to the use of your personal data, for example if you are of the opinion that the use of your personal data is not necessary for carrying out our activities or for fulfilling any statutory obligation.
• You have the right of access to your personal data. This means that you can ask which of your personal data has been registered and for which purposes this data is used.
• If you think that we have incorrect personal data regarding you, you can have this personal data corrected. You can also ask us to restrict the processing of your personal data, also for the period that we require to assess your requests or objections.
• You can also ask us to remove your personal data from our systems.
• Lastly, you can also ask us to ensure that your personal data is transferred to another party.

In addition you can also:

• Withdraw consent: for example for receiving emails. You can do this by unsubscribing for our emails. You can contact us if you want to withdraw your consent for other processing operations.
• Submitting a complaint to the Dutch Data Protection Authority: Are you of the opinion that we are not acting in accordance with privacy legislation? In that case, we would naturally like to hear this and we will ensure a solution is found as soon as possible. After 25 May 2018, you also have the right to submit a complaint to the Dutch Data Protection Authority, but of course we sincerely hope that this will not be necessary.

We will grant your request, unless we have a compelling and legitimate interest not to remove the data, which outweighs your privacy interest. If we have removed the data, we cannot immediately remove all copies of the data from our systems and backup systems due to technical reasons. We can refuse to grant the requests referred to above if these are made unreasonably frequently, require unreasonably onerous technical efforts, or have unreasonably onerous technical consequences for our systems or endanger the privacy of others.

You can make the requests or the objections referred to above by sending a letter, provided with your name, address, telephone number, and a copy of a valid proof of identity to marketing@yellowstar.com. Please do not forget to black out your CSN number on the copy of the identity document and to cover the passport photo before sending these to us. You will receive a reply within 4 weeks.

8. Security

We take all reasonable, appropriate security measures to protect you against unlawful access or alteration, disclosure, or destruction of your personal data. We thereby comply with the applicable security standards.

If, in spite of the security measures, there is still a security incident that may have disadvantageous consequences for your privacy, we will inform you of the incident as quickly as possible. In that case, we will also inform you of the measures that we have taken for the limitation of the consequences and for the prevention of any repetition in the future.

9. Third party websites

This privacy statement does not apply to third party websites that are linked to our website by means of links. This is because we cannot guarantee that these websites deal with your personal data in a reliable or secure manner. Before using the website concerned, please always read the privacy statement of the website for further information regarding the manner in which they deal with your data.

10. Contact and complaints

You can contact the marketingdepartment at marketing@yellowstar.comfor questions regarding the use of your personal data.

Of course we like to help you further if you have complaints regarding the processing of your data. If you nevertheless have a complaint regarding our use of your data, you will have the right on the basis of privacy legislation to submit a complaint to the privacy supervisor, the Dutch Data Protection Authority. You can contact the Dutch Data Protection Authority for this.